Overview

TridentScan is an attack surface intelligence platform that analyzes publicly accessible information about domains and email configurations. We are committed to transparency about what data we collect, how we use it, and how we protect it.

What We Scan

TridentScan only analyzes publicly accessible information. This includes DNS records, HTTP headers, SSL/TLS certificates, publicly served resources, and other data available to any internet user. We do not perform authenticated scanning, penetration testing, or any form of intrusive analysis.

Data We Collect

• Scan targets. The domains and email addresses you submit for analysis.
• Scan results. The intelligence generated from analyzing your targets.
• Account data. If you create an account: email address and authentication credentials managed through our identity provider.
• Payment data. Processed entirely by Stripe. We never see or store your card details.

Data We Do Not Collect

• We do not collect personally identifiable information beyond what you provide.
• We do not use analytics or tracking scripts.
• We do not sell, share, or trade your data with third parties.
• We do not use your scan data to train machine learning models.

Data Retention

• Free tier. Scan results are retained for 24 hours, then permanently deleted.
• Paid tiers. Scan results are retained for 90 days. You may request deletion at any time.
• Account deletion. Deleting your account removes all associated scan data immediately.

Infrastructure

TridentScan runs entirely on Cloudflare Workers. There are no traditional backend servers. Your requests are processed at Cloudflare's nearest edge node. Data in transit is encrypted via TLS. Data at rest is stored in Cloudflare's encrypted storage systems.

Cookies

We use only essential cookies required for authentication. No marketing cookies. No tracking cookies. No third-party cookies.

GDPR Rights

If you are located in the European Economic Area, you have the following rights:

• Right to access. Request a copy of the data we hold about you.
• Right to deletion. Request permanent deletion of your data.
• Right to portability. Receive your data in a structured, machine-readable format.
• Right to rectification. Request correction of inaccurate data.

To exercise any of these rights, contact us at the address below. We respond to all requests within 30 days.

CCPA Rights

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

• Right to know. Request what personal information we collect and how it is used.
• Right to delete. Request deletion of your personal information.
• Right to opt-out. We do not sell personal information. There is nothing to opt out of.
• Non-discrimination. We will not discriminate against you for exercising your privacy rights.

Contact

For privacy-related inquiries: privacy@tridentscan.com

Changes

We may update this policy to reflect changes in our practices or for legal, regulatory, or operational reasons. Material changes will be communicated through the platform.